Privacy Policy

Last updated October 25, 2026

What we collect

When you sign up, we collect your email and password (handled by our authentication provider, Supabase — we never see or store your raw password). During onboarding, you share a display name, your recovery start date, your challenge (addiction, eating disorder, PTSD, etc.), and optionally a location and short bio. None of it has to be your real name — the forms offer a made-up one — and after 90 days you can take your email off the account altogether (see “What no website can promise” below).

Everything else is what you choose to enter: daily check-ins, gratitude lists, journal entries, goals, workbook answers, to-do items, and posts. If you connect with friends, request a mentor, join a group, or link to a recovery program, we store those relationships and the messages exchanged within them. If you enable push notifications, we store a device subscription token so we can deliver them. The member area also keeps your browser's time zone in a cookie, so check-ins and journal pages are dated by your own day rather than the server's.

What we don't collect

No advertising trackers, no third-party analytics pixels, no selling or renting your data to anyone — ever. Amity Connect does show a few cards marked “Sponsored” that we place ourselves. Everyone who sees a card sees the same one, no advertiser receives any information about you from us, and following one simply takes you to the advertiser's site without telling it which page you came from.

Who can see what

By default, your check-ins, goals, workbook answers, priorities, and contract are visible only to you. Wall posts (status updates, check-ins, gratitude, journal pages you choose to share) have a visibility setting you control: only me, my mentors, friends, or public. Friends are added by exact username — there is no public member directory or search, so no one can browse for you. The only people Amity Connect ever suggests to you are people you already share a group with.

My Journal is private, full stop: one page for each day, readable only by you. No sharing setting, no mentor view, no program view, and nothing you write there appears anywhere else unless you choose “Share to my wall” on a page — which copies that day onto your wall for the people you pick, and nothing more.

The scribeis the one exception, and only if you turn it on. “Tell me about your day” on today's page sends the words you type in that box to Anthropic's Claude, which tidies them into a page in your own voice and sorts the rest into proposals for your to-do list, check-in, gratitude list, important dates, priorities, goals, 12 Steps timeline, the week's Engagement Zone questions, a post for your wall and a goal you stated. The same scribe is offered on every workbook exercise, on My goals and on your aftercare plan (“Talk it through”): what you say there is put into that form's own boxes for you to check, and only the form's Save saves it. While your plan is shared with your home, its staff can do the same on it, in your voice, from what they say. A home's staff can also have the scribe draft an exercise for residents from a description — the staff member edits it before anyone sees it, and the scribe is held to the same rules about what a resident may be asked. You tick what's right; nothing is saved until you say so, and nothing reaches other people unless you tick it and choose who sees it, exactly as on the wall's own forms. To do that job the scribe is also shown the exercise's questions, the titles of your open to-dos, your kept dates, priorities and goals with their steps, and this week's questions — never the answers you gave before. One switch covers all of it: turning the scribe on or off anywhere turns it on or off everywhere. Those words go to Anthropic only to do that job: under its commercial terms they aren't used to train its models, and we keep nothing from the exchange beyond what you choose to save (our logs record only that a request happened and how long it took). The scribe never sees anyone else's words — not your mentor's notes, your home's boards or your recordings — and it is not a counselor: it gives no advice, and when what you write suggests you may be in danger it shows the crisis lines instead. It is off until you turn it on, and you can turn it off on the same page at any time. Wherever the scribe is working you'll see its mark — the pen stroke and sun above — and where you don't see it, it isn't: not on the message boards, not in mentor conversations, not on the crisis page.

Your wall is also a timeline of what you do here: saving or sharing a workbook exercise; working My 12 Steps (starting a round, saying a step out loud, logging a hard day or a win, completing a step); setting, working on or achieving a goal; ticking off a to-do, adding an important date, setting your priorities or signing your contract in My Tools; starting a topic or replying on your home's message boards, answering an event invitation, joining or leaving a home; starting, updating or sharing your aftercare plan; completing an alumni check-up; a new friend or mentor; and encouragement you send or receive — each adds an entry. Entries say what happened — never your answers, the words of your goals or notes, or a to-do beyond its title — and start as “Only me”; you choose who sees each one, and deleting an entry deletes only the entry. Someone who follows an entry's link sees your work only if you've shared that exercise (or your 12 Steps or goals) with them; links into your tools, your plan or your home's boards work only for you. Encouragement and new-connection entries name the other person, so they can be shared with friends or mentors but never made public. A 💛 from a friend or mentor shows on both your walls until it's taken back. Your journal's “Also on this day” reads these same entries back for each day — for you only.

If you request a mentor and they accept, the two of you get a private conversation; nobody else can read it, including us, outside of what's needed to operate the service. Your mentor can also see posts you mark “My mentors” and any workbook exercise you choose to share with them, one exercise at a time, until you stop sharing it or the mentorship ends. If you turn on the "quiet flag," they can see the date of your last check-in only — never its content.

Groups belong to recovery programs (a recovery home, sober living, or aftercare program using Amity Connect); members can't create their own. Each program has one group, with message boards inside it, visible only to the program's current residents, alumni and staff. The staff, and the moderators they choose, can pin, lock, move and remove topics. You can edit what you post, delete your replies, and delete a topic you started until someone else replies to it. Amity Connect remembers which topics you've read so it can mark new ones; nobody else sees that.

If you link to a recovery program (a treatment center or recovery home using Amity Connect), their staff can assign you workbook exercises, but they cannot read your answers unless you explicitly choose to share that specific exercise. Your program can also put together a welcome packet — exercises from the library and its own, with a note from the home — which you can print from the Workbook; the home's own exercises in that packet are readable to its residents and alumni for that reason, and nothing about printing is recorded. While you are a resident, staff can see which days you checked in — never what you wrote. When you finish your stay you can become an alum: you keep your plan, your program's message boards, and your mentor, and your program sees your check-in days only if you turn that on. Your program can suggest a mentor to you (the mentor is not told unless you send a request), and if you are an alum with a mentor profile, your program may suggest you to its residents. You can see the names and titles of your program's staff. Leaving a program ends its access to anything you had shared, and removes you from its group and message boards; your own answers stay with you.

You and your program can build an aftercare plan together: appointments, meetings, people to call, warning signs, and anything else you add. A plan your program starts is shared with its staff; one you start yourself is private until you choose to share it (your program can see that you have a plan, but not what's in it). You can stop sharing at any time, and the plan stays on your account after you leave. Phone numbers you add for the people you can call are visible only to you, and to your program while you share the plan.

Your goals are private too. You can share them, read-only, with a mentor or with your program, and stop at any time; a program's access ends when you leave it. Your program's staff can suggest a goal to you: it waits on your goals page until you add it or pass on it, and the staff can see it only while it waits. If you add it, the staff member who suggested it is told. My 12 Steps works the same way: you choose whether a mentor or your program sees your progress (or your progress and your step writing), and your voice recordings are never shared with anyone.

If you are an alum, we ask five short questions 30, 60 and 90 days, 6 months, and a year after you graduate: whether you have used in the last 30 days, whether you go to meetings, whether you are working or in school, whether your housing is stable, and how life is going. You can skip any of them. Your answers are visible only to you. Your program sees only totals across its alumni, and each figure appears only once at least five alumni have answered that question.

A program's house schedule and events are visible only to its staff and to the residents or alumni they are meant for (staff times, when support is limited, are shown to everyone at the home). If you RSVP to an event, the program's staff can see your answer, and the other people invited can see your name if you're going or might go. If you can't make it, only the staff see that.

We enforce all of the above with database-level row security (RLS) rules, not just application logic — meaning the restriction holds even if there were a bug in our app code.

Content moderation

Public forum posts and community threads can be reported by other members. Content that receives three or more open reports is automatically hidden pending review by a moderator, who can restore it, keep it hidden, or remove it.

Where your data lives

We use Supabase (Postgres) for our database and authentication, and Vercel for hosting. Both are reputable infrastructure providers under standard data-processing terms; neither has any independent right to use your data for their own purposes.

What no website can promise

Amity Connect is a website, and no website can promise it will never be broken into — not this one, not any. We build it so that only you can see your journal, workbook and plan unless you choose to share, and we keep making that stronger. But we would rather say the plain thing than the comforting one: write here as you would write anything that lives on the internet.

Three things make it much harder for what you write to point at you, even in the worst case. Use a made-up name — the sign-up, onboarding and profile forms will suggest one if what you type looks like a real first name. After 90 days, take your email off the account(Settings → Your email): the address is replaced by a stand-in that can't receive mail, you sign in with your username, and recovery codes are your way back in if you forget your password. And leave out the detailsyou would never want tied to you — full names, addresses, employers, other people's business, anything legal. If something feels too sensitive to type, keep that one on paper.

Where we are headed: encrypting the most personal writing so that even the people who run the site can't read it. That isn't in place yet, and we won't say it is until it is.

Your choices

You can edit or delete most of your own content directly in the app, and print or save as a PDF your journal, your 12 Steps, any workbook exercise (blank or with your answers), whole packets of exercises, your goals and your aftercare plan — those pages are built in your browser from what's already yours, and nothing leaves it until you press Print. For anything you can't yet self-serve — exporting your data in bulk, deleting your account entirely, or questions about a specific piece of data — email amityconnect@protonmail.com and we'll handle it directly.

Who this is for

Amity Connect is intended for adults (18+). We don't knowingly collect information from anyone under 18.

Not a substitute for professional care

Amity Connect is a peer-support and self-tracking tool, not a healthcare provider. If you're in crisis, call or text 988 (Suicide & Crisis Lifeline) any time, call SAMHSA's helpline at 1-800-662-HELP (4357), or call 911 in an emergency.

Changes to this policy

If this policy changes in a way that materially affects how your data is handled, we'll post the update here and change the date at the top. Continued use of Amity Connect after a change means you accept the update.

Contact

Questions about this policy: amityconnect@protonmail.com.